Frame 1 (174 bytes on wire, 174 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.321204000 Time delta from previous packet: 0.000000000 seconds Time since reference or first frame: 0.000000000 seconds Frame Number: 1 Packet Length: 174 bytes Capture Length: 174 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x6e50aca2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 156 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb85 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 136 Checksum: 0x4f1b (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0000000000000000 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 128 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 44 Vendor ID: Check Point Check Point Product: VPN-1 Version: NG with Application Intelligence R55 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 00 9c 00 00 40 00 40 11 fb 85 a5 e3 f9 7a a5 e3 ....@.@......z.. 0020 f9 89 01 f4 01 f4 00 88 4f 1b d4 10 31 91 2b 38 ........O...1.+8 0030 62 c3 00 00 00 00 00 00 00 00 01 10 02 00 00 00 b............... 0040 00 00 00 00 00 80 0d 00 00 38 00 00 00 01 00 00 .........8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 2c f4 ed 19 e0 c1 14 eb 51 6f aa ac 0e e3 7d .,.......Qo....} 0090 af 28 07 b4 38 1f 00 00 00 01 00 00 13 8d 00 00 .(..8........... 00a0 00 00 00 00 00 00 18 80 00 00 6e 50 ac a2 ..........nP.. Frame 2 (150 bytes on wire, 150 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.346136000 Time delta from previous packet: 0.024932000 seconds Time since reference or first frame: 0.024932000 seconds Frame Number: 2 Packet Length: 150 bytes Capture Length: 150 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0xea8c20a5 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 132 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb9d (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 112 Checksum: 0xbff6 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Security Association (1) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 104 Security Association payload Next payload: Vendor ID (13) Length: 56 Domain of interpretation: IPSEC (1) Situation: IDENTITY (1) Proposal payload # 1 Next payload: NONE (0) Length: 44 Proposal number: 1 Protocol ID: ISAKMP (1) SPI size: 0 Number of transforms: 1 Transform payload # 1 Next payload: NONE (0) Length: 36 Transform number: 1 Transform ID: KEY_IKE (1) Encryption-Algorithm (1): 3DES-CBC (5) Hash-Algorithm (2): SHA (2) Authentication-Method (3): PSK (1) Group-Description (4): Alternate 1024-bit MODP group (2) Life-Type (11): Seconds (1) Life-Duration (12): Duration-Value (28800) Vendor ID payload Next payload: NONE (0) Length: 20 Vendor ID: draft-ietf-ipsec-dpd-00.txt 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 84 00 00 40 00 40 11 fb 9d a5 e3 f9 89 a5 e3 ....@.@......... 0020 f9 7a 01 f4 01 f4 00 70 bf f6 d4 10 31 91 2b 38 .z.....p....1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 01 10 02 00 00 00 b..0.~..bg...... 0040 00 00 00 00 00 68 0d 00 00 38 00 00 00 01 00 00 .....h...8...... 0050 00 01 00 00 00 2c 01 01 00 01 00 00 00 24 01 01 .....,.......$.. 0060 00 00 80 01 00 05 80 02 00 02 80 03 00 01 80 04 ................ 0070 00 02 80 0b 00 01 00 0c 00 04 00 00 70 80 00 00 ............p... 0080 00 14 af ca d7 13 68 a1 f1 c9 6b 86 96 fc 77 57 ......h...k...wW 0090 01 00 ea 8c 20 a5 .... . Frame 3 (230 bytes on wire, 230 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.351433000 Time delta from previous packet: 0.005297000 seconds Time since reference or first frame: 0.030229000 seconds Frame Number: 3 Packet Length: 230 bytes Capture Length: 230 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3cf19710 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 212 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb4d (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 192 Checksum: 0xc67e (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 184 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 24 Nonce Data 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 00 d4 00 00 40 00 40 11 fb 4d a5 e3 f9 7a a5 e3 ....@.@..M...z.. 0020 f9 89 01 f4 01 f4 00 c0 c6 7e d4 10 31 91 2b 38 .........~..1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 04 10 02 00 00 00 b..0.~..bg...... 0040 00 00 00 00 00 b8 0a 00 00 84 5f 6a d6 cd d5 be .........._j.... 0050 9a f4 1b 1f 1a aa 80 15 6f ca b6 6b 80 9b 80 8e ........o..k.... 0060 14 db e2 33 41 b5 60 f7 42 f9 26 76 c0 4f 66 88 ...3A.`.B.&v.Of. 0070 23 52 5b 29 58 c8 19 21 6a 8c ae 4b 95 1b 8f 0e #R[)X..!j..K.... 0080 26 c4 e4 d6 92 91 50 b8 2c 7c 68 2f 6e 0f 4f 1b &.....P.,|h/n.O. 0090 f2 9a e8 63 d8 3b 1d e4 5a b7 dc 9a 95 1a 77 00 ...c.;..Z.....w. 00a0 58 9c c5 6a 20 bf 74 19 55 30 d9 06 a3 8e 5d 3d X..j .t.U0....]= 00b0 44 32 97 50 49 6d 5a dd b8 61 69 ba 54 73 05 8d D2.PImZ..ai.Ts.. 00c0 a0 f7 38 1b ea 3a 29 15 b2 0b 00 00 00 18 34 3f ..8..:).......4? 00d0 5b eb af 34 e9 18 48 5f 42 72 5d 9b 48 bc a1 53 [..4..H_Br].H..S 00e0 9f 57 3c f1 97 10 .W<... Frame 4 (226 bytes on wire, 226 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.368265000 Time delta from previous packet: 0.016832000 seconds Time since reference or first frame: 0.047061000 seconds Frame Number: 4 Packet Length: 226 bytes Capture Length: 226 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x5b775bc5 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 208 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfb51 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 188 Checksum: 0x8165 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Key Exchange (4) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...0 = No encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 180 Key Exchange payload Next payload: Nonce (10) Length: 132 Key Exchange Data Nonce payload Next payload: NONE (0) Length: 20 Nonce Data 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 d0 00 00 40 00 40 11 fb 51 a5 e3 f9 89 a5 e3 ....@.@..Q...... 0020 f9 7a 01 f4 01 f4 00 bc 81 65 d4 10 31 91 2b 38 .z.......e..1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 04 10 02 00 00 00 b..0.~..bg...... 0040 00 00 00 00 00 b4 0a 00 00 84 f5 85 72 95 25 95 ............r.%. 0050 b2 9a 67 ea 1f 5b 48 c0 75 2c 2e 35 b5 14 d7 16 ..g..[H.u,.5.... 0060 87 a0 b2 cd 04 0d 46 da ac c2 cf bc b3 bb 22 4e ......F......."N 0070 82 e7 3e 80 4b 5d 8b f2 19 0b 45 8e 11 53 56 99 ..>.K]....E..SV. 0080 01 11 9d 7f 44 c5 7d 1b 28 70 6a f0 b8 2f 83 ce ....D.}.(pj../.. 0090 e0 a5 20 7a 6b 54 13 27 fa a9 eb ef 46 c7 d5 f0 .. zkT.'....F... 00a0 35 d9 14 43 25 e1 c8 9a f6 05 98 d9 23 3d 27 8c 5..C%.......#='. 00b0 55 22 ae a6 b2 3c 8b ac 74 55 b5 71 06 a9 1e 09 U"...<..tU.q.... 00c0 87 eb ff bb 85 ac a1 8a bf 96 00 00 00 14 a4 02 ................ 00d0 f1 e8 65 bb 10 92 cb fd e6 29 a3 3c f0 55 5b 77 ..e......).<.U[w 00e0 5b c5 [. Frame 5 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.376713000 Time delta from previous packet: 0.008448000 seconds Time since reference or first frame: 0.055509000 seconds Frame Number: 5 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xcf0df5f4 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc1 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x69c7 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 00 60 00 00 40 00 40 11 fb c1 a5 e3 f9 7a a5 e3 .`..@.@......z.. 0020 f9 89 01 f4 01 f4 00 4c 69 c7 d4 10 31 91 2b 38 .......Li...1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 05 10 02 01 00 00 b..0.~..bg...... 0040 00 00 00 00 00 44 75 8b 56 e7 ff 57 c5 52 25 4b .....Du.V..W.R%K 0050 0c 7d 25 89 a0 b4 40 29 cd 1d 22 36 9e 89 47 28 .}%...@).."6..G( 0060 8a 6b df d1 a6 3d 09 74 32 14 92 6e 32 4e cf 0d .k...=.t2..n2N.. 0070 f5 f4 .. Frame 6 (114 bytes on wire, 114 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.379652000 Time delta from previous packet: 0.002939000 seconds Time since reference or first frame: 0.058448000 seconds Frame Number: 6 Packet Length: 114 bytes Capture Length: 114 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x73725e7f (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 96 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc1 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 76 Checksum: 0x58b1 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Identification (5) Version: 1.0 Exchange type: Identity Protection (Main Mode) (2) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x00000000 Length: 68 Encrypted payload (40 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 60 00 00 40 00 40 11 fb c1 a5 e3 f9 89 a5 e3 .`..@.@......... 0020 f9 7a 01 f4 01 f4 00 4c 58 b1 d4 10 31 91 2b 38 .z.....LX...1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 05 10 02 01 00 00 b..0.~..bg...... 0040 00 00 00 00 00 44 b1 66 23 c1 8c 13 af 9c fa 2d .....D.f#......- 0050 0b eb f9 dc b9 dd a9 23 47 24 9d 8b c9 9b d2 6c .......#G$.....l 0060 05 31 95 95 85 7f fb 81 37 41 bd f9 ba 9d 73 72 .1......7A....sr 0070 5e 7f ^. Frame 7 (346 bytes on wire, 346 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.387039000 Time delta from previous packet: 0.007387000 seconds Time since reference or first frame: 0.065835000 seconds Frame Number: 7 Packet Length: 346 bytes Capture Length: 346 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xf32aedf8 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 328 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfad9 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 308 Checksum: 0x8111 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8BCB76D2 Length: 300 Encrypted payload (272 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 01 48 00 00 40 00 40 11 fa d9 a5 e3 f9 7a a5 e3 .H..@.@......z.. 0020 f9 89 01 f4 01 f4 01 34 81 11 d4 10 31 91 2b 38 .......4....1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 08 10 20 01 8b cb b..0.~..bg.. ... 0040 76 d2 00 00 01 2c 97 9f f0 87 15 53 f2 00 e0 4d v....,.....S...M 0050 8a 0a b4 37 77 d9 cb 47 1e 9e ff 56 9e 7b 09 26 ...7w..G...V.{.& 0060 8f 65 36 1b d8 c0 c4 c2 e2 85 ae 6a 89 9a 44 ac .e6........j..D. 0070 73 7c a1 8c 43 1b 30 3c a6 5e e4 ad 46 17 07 29 s|..C.0<.^..F..) 0080 b3 c1 2f dd 4e 96 ca b2 2c da 79 d0 ee d5 a0 f5 ../.N...,.y..... 0090 d6 bf c1 97 e2 3f f0 2d 39 43 50 d0 b8 f6 db b0 .....?.-9CP..... 00a0 e9 a6 8d 65 c2 ac 86 29 46 8d 52 b5 39 38 ac 1f ...e...)F.R.98.. 00b0 ea f1 bc 8f 92 f3 5a 47 22 bd 5e 07 24 2f 3a cb ......ZG".^.$/:. 00c0 69 0f 58 ae 58 4b f4 cb ca 8c 13 7d ee 37 d3 4a i.X.XK.....}.7.J 00d0 8a 9d 21 12 43 b5 f0 33 2f be 8b bf 29 5a d5 1c ..!.C..3/...)Z.. 00e0 72 d7 48 44 99 53 27 35 8f 87 a9 69 b8 d7 9b cc r.HD.S'5...i.... 00f0 3e c9 3f 4d cc 54 82 94 09 06 84 a1 37 be 86 83 >.?M.T......7... 0100 5f ca 9d 3b db 15 f2 74 28 c8 8f 4e 36 cf 8a da _..;...t(..N6... 0110 5a fd 3f cf 5e e3 29 f0 c2 27 51 5b 20 77 e1 86 Z.?.^.)..'Q[ w.. 0120 6a f3 80 98 78 5f 56 71 65 6d c1 86 ca 6f 55 cb j...x_Vqem...oU. 0130 b3 9e f1 b9 ca 45 07 5b 84 3e 7b 9c 9d 3a ce 09 .....E.[.>{..:.. 0140 e3 ba 9a d3 33 35 66 3c 4e 0f 67 c9 eb 94 1e ff ....35fD+...c...N 0100 97 6c ad 82 f5 f6 ed 5d 9d 68 bd c8 a9 c5 b5 ef .l.....].h...... 0110 01 6a 36 83 58 f5 2a 7d 3e 90 c4 6d 53 70 a6 2b .j6.X.*}>..mSp.+ 0120 fd f1 90 4e 93 34 6a f3 e4 27 f0 42 96 1e 4a e2 ...N.4j..'.B..J. 0130 31 37 02 71 85 7b 71 84 50 a8 f0 44 ea c4 85 6a 17.q.{q.P..D...j 0140 4e e4 09 2a 2c 59 c3 83 c7 b4 90 83 8a 81 92 6b N..*,Y.........k 0150 10 59 .Y Frame 9 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.415894000 Time delta from previous packet: 0.007832000 seconds Time since reference or first frame: 0.094690000 seconds Frame Number: 9 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4c789a49 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc9 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3369 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8BCB76D2 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 00 58 00 00 40 00 40 11 fb c9 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 89 01 f4 01 f4 00 44 33 69 d4 10 31 91 2b 38 .......D3i..1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 08 10 20 01 8b cb b..0.~..bg.. ... 0040 76 d2 00 00 00 3c 22 bb 57 dd 7d 5f b4 74 06 27 v....<".W.}_.t.' 0050 90 35 6e f4 6c ca d7 65 d0 c3 44 7b 48 9d f6 cd .5n.l..e..D{H... 0060 2e 6d 13 22 35 c3 4c 78 9a 49 .m."5.Lx.I Frame 10 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.497887000 Time delta from previous packet: 0.081993000 seconds Time since reference or first frame: 0.176683000 seconds Frame Number: 10 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4c789a49 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc9 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3369 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8BCB76D2 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 00 58 00 00 40 00 40 11 fb c9 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 89 01 f4 01 f4 00 44 33 69 d4 10 31 91 2b 38 .......D3i..1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 08 10 20 01 8b cb b..0.~..bg.. ... 0040 76 d2 00 00 00 3c 22 bb 57 dd 7d 5f b4 74 06 27 v....<".W.}_.t.' 0050 90 35 6e f4 6c ca d7 65 d0 c3 44 7b 48 9d f6 cd .5n.l..e..D{H... 0060 2e 6d 13 22 35 c3 4c 78 9a 49 .m."5.Lx.I Frame 11 (106 bytes on wire, 106 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.572846000 Time delta from previous packet: 0.074959000 seconds Time since reference or first frame: 0.251642000 seconds Frame Number: 11 Packet Length: 106 bytes Capture Length: 106 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x4c789a49 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 88 Identification: 0x0000 (0) Flags: 0x04 .1.. = Don't fragment: Set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: UDP (0x11) Header checksum: 0xfbc9 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) User Datagram Protocol, Src Port: 500 (500), Dst Port: 500 (500) Source port: 500 (500) Destination port: 500 (500) Length: 68 Checksum: 0x3369 (correct) Internet Security Association and Key Management Protocol Initiator cookie: 0xD41031912B3862C3 Responder cookie: 0x0030EE7EB7BF6267 Next payload: Hash (8) Version: 1.0 Exchange type: Quick Mode (32) Flags .... ...1 = Encryption .... ..0. = No commit .... .0.. = No authentication Message ID: 0x8BCB76D2 Length: 60 Encrypted payload (32 bytes) 0000 00 e0 13 00 2c 4a 00 0c 29 fc 0c 9f 08 00 45 00 ....,J..).....E. 0010 00 58 00 00 40 00 40 11 fb c9 a5 e3 f9 7a a5 e3 .X..@.@......z.. 0020 f9 89 01 f4 01 f4 00 44 33 69 d4 10 31 91 2b 38 .......D3i..1.+8 0030 62 c3 00 30 ee 7e b7 bf 62 67 08 10 20 01 8b cb b..0.~..bg.. ... 0040 76 d2 00 00 00 3c 22 bb 57 dd 7d 5f b4 74 06 27 v....<".W.}_.t.' 0050 90 35 6e f4 6c ca d7 65 d0 c3 44 7b 48 9d f6 cd .5n.l..e..D{H... 0060 2e 6d 13 22 35 c3 4c 78 9a 49 .m."5.Lx.I Frame 12 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.661486000 Time delta from previous packet: 0.088640000 seconds Time since reference or first frame: 0.340282000 seconds Frame Number: 12 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x3f2da914 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013c (316) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b54 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 1 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 01 3c 00 00 ff 32 7b 54 a5 e3 f9 7a a5 e3 .p.<...2{T...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 01 1a 3f 65 fa c1 b7 ..k..J.....?e... 0030 e6 9d 5b 17 58 4f da bf 4d 24 5a 92 62 a1 4f e9 ..[.XO..M$Z.b.O. 0040 86 2e 7e 5f a8 aa dd f6 64 db 86 98 19 50 6a 31 ..~_....d....Pj1 0050 e5 4b 1e 3d 7c 96 6e 7b 22 07 72 16 87 eb 32 3e .K.=|.n{".r...2> 0060 4c d4 7b 7e d0 f7 6d 9f 88 4f dc f7 55 0d 9f 27 L.{~..m..O..U..' 0070 fc 1c 15 7b 12 3c f1 93 b6 45 b4 8e 46 63 3f 2d ...{.<...E..Fc?- 0080 a9 14 .. Frame 13 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.661688000 Time delta from previous packet: 0.000202000 seconds Time since reference or first frame: 0.340484000 seconds Frame Number: 13 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x9b671893 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013c (316) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c54 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 1 Data (84 bytes) 0000 00 e0 13 00 2c 4a 00 50 fc 84 d2 ec 08 00 45 00 ....,J.P......E. 0010 00 70 01 3c 00 00 fe 32 7c 54 a5 e3 f9 7a a5 e3 .p.<...2|T...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 01 1a 3f 65 fa c1 b7 ..k..J.....?e... 0030 e6 9d 5b 17 58 4f da bf 4d 24 5a 92 62 a1 4f e9 ..[.XO..M$Z.b.O. 0040 86 2e 7e 5f a8 aa dd f6 64 db 86 98 19 50 6a 31 ..~_....d....Pj1 0050 e5 4b 1e 3d 7c 96 6e 7b 22 07 72 16 87 eb 32 3e .K.=|.n{".r...2> 0060 4c d4 7b 7e d0 f7 6d 9f 88 4f dc f7 55 0d 9f 27 L.{~..m..O..U..' 0070 fc 1c 15 7b 12 3c f1 93 b6 45 b4 8e 46 63 9b 67 ...{.<...E..Fc.g 0080 18 93 .. Frame 14 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:03.663212000 Time delta from previous packet: 0.001524000 seconds Time since reference or first frame: 0.342008000 seconds Frame Number: 14 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x41afef71 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa03a (41018) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x9b56 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x656b7479 Sequence: 1 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 70 a0 3a 00 00 40 32 9b 56 a5 e3 f9 89 a5 e3 .p.:..@2.V...... 0020 f9 7a 65 6b 74 79 00 00 00 01 7d 0c 0e ad 2b 74 .zekty....}...+t 0030 50 58 a5 51 b9 ff f3 26 cf f4 23 42 52 97 d7 35 PX.Q...&..#BR..5 0040 68 93 d9 83 e5 59 72 48 1e ad 30 ab b1 27 9d 39 h....YrH..0..'.9 0050 c9 6d 1e 5e 2d cd 98 d0 cb c7 21 46 c0 e3 8f 31 .m.^-.....!F...1 0060 16 fd cc 60 a3 49 5a 8d bc 56 d7 51 ef ee a1 8c ...`.IZ..V.Q.... 0070 a8 69 a5 ff 5a 33 15 b9 ce b0 b7 61 d8 6b 41 af .i..Z3.....a.kA. 0080 ef 71 .q Frame 15 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:04.303186000 Time delta from previous packet: 0.639974000 seconds Time since reference or first frame: 0.981982000 seconds Frame Number: 15 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe21f0ff0 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013d (317) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b53 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 2 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 01 3d 00 00 ff 32 7b 53 a5 e3 f9 7a a5 e3 .p.=...2{S...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 02 dc f7 55 0d 9f 27 ..k..J......U..' 0030 fc 1c a7 7c 7e 01 ab 0e 63 8b 25 fb 79 bd ad 51 ...|~...c.%.y..Q 0040 73 27 79 99 50 e0 cb 96 c9 d5 c3 7e a9 5e fb 4c s'y.P......~.^.L 0050 82 3b 8a 09 ad 59 63 f7 80 1c 81 b7 b6 2e 3d dc .;...Yc.......=. 0060 e1 ce c6 22 5b 68 c4 c8 c9 77 13 ca 54 cf 23 0f ..."[h...w..T.#. 0070 c0 5a 49 30 ea ad c5 ef cf 29 7b 65 d8 e4 e2 1f .ZI0.....){e.... 0080 0f f0 .. Frame 16 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:04.303330000 Time delta from previous packet: 0.000144000 seconds Time since reference or first frame: 0.982126000 seconds Frame Number: 16 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x4655be77 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013d (317) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c53 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 2 Data (84 bytes) 0000 00 e0 13 00 2c 4a 00 50 fc 84 d2 ec 08 00 45 00 ....,J.P......E. 0010 00 70 01 3d 00 00 fe 32 7c 53 a5 e3 f9 7a a5 e3 .p.=...2|S...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 02 dc f7 55 0d 9f 27 ..k..J......U..' 0030 fc 1c a7 7c 7e 01 ab 0e 63 8b 25 fb 79 bd ad 51 ...|~...c.%.y..Q 0040 73 27 79 99 50 e0 cb 96 c9 d5 c3 7e a9 5e fb 4c s'y.P......~.^.L 0050 82 3b 8a 09 ad 59 63 f7 80 1c 81 b7 b6 2e 3d dc .;...Yc.......=. 0060 e1 ce c6 22 5b 68 c4 c8 c9 77 13 ca 54 cf 23 0f ..."[h...w..T.#. 0070 c0 5a 49 30 ea ad c5 ef cf 29 7b 65 d8 e4 46 55 .ZI0.....){e..FU 0080 be 77 .w Frame 17 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:04.304444000 Time delta from previous packet: 0.001114000 seconds Time since reference or first frame: 0.983240000 seconds Frame Number: 17 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x405966e5 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa03b (41019) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x9b55 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x656b7479 Sequence: 2 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 70 a0 3b 00 00 40 32 9b 55 a5 e3 f9 89 a5 e3 .p.;..@2.U...... 0020 f9 7a 65 6b 74 79 00 00 00 02 d7 51 ef ee a1 8c .zekty.....Q.... 0030 a8 69 32 ac ee ae 83 01 ac 65 6e d5 38 9c 35 60 .i2......en.8.5` 0040 7d 22 6c 6d 30 56 af c3 b3 c8 d0 1d 21 20 c9 ee }"lm0V......! .. 0050 b1 36 ea ac 91 60 7e 6b 95 d4 07 54 fb f6 26 b5 .6...`~k...T..&. 0060 a4 98 3c ab a4 d3 93 b6 48 fd af 64 1d 6b 91 84 ..<.....H..d.k.. 0070 c5 2f db 0f 87 9e fc 54 08 1e ac 72 c0 32 40 59 ./.....T...r.2@Y 0080 66 e5 f. Frame 18 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:05.310823000 Time delta from previous packet: 1.006379000 seconds Time since reference or first frame: 1.989619000 seconds Frame Number: 18 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0x1ee041d5 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013e (318) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b52 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 3 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 01 3e 00 00 ff 32 7b 52 a5 e3 f9 7a a5 e3 .p.>...2{R...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 03 13 ca 54 cf 23 0f ..k..J......T.#. 0030 c0 5a 9a a2 2b 41 0e 71 d8 8b cf d8 95 07 2a d3 .Z..+A.q......*. 0040 05 51 1a 80 c9 92 05 16 e1 b5 92 5b 18 b4 fa 40 .Q.........[...@ 0050 4b 7c 97 52 88 3c 01 21 d7 03 4a 96 9e de 34 eb K|.R.<.!..J...4. 0060 f7 5c 32 4b 3e 00 30 9a bb 4b e4 77 96 8a 76 c2 .\2K>.0..K.w..v. 0070 37 23 3a 76 5b c9 c4 ea 4f 97 5a cb c1 c6 1e e0 7#:v[...O.Z..... 0080 41 d5 A. Frame 19 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:05.311021000 Time delta from previous packet: 0.000198000 seconds Time since reference or first frame: 1.989817000 seconds Frame Number: 19 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0xbaaaf052 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013e (318) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c52 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 3 Data (84 bytes) 0000 00 e0 13 00 2c 4a 00 50 fc 84 d2 ec 08 00 45 00 ....,J.P......E. 0010 00 70 01 3e 00 00 fe 32 7c 52 a5 e3 f9 7a a5 e3 .p.>...2|R...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 03 13 ca 54 cf 23 0f ..k..J......T.#. 0030 c0 5a 9a a2 2b 41 0e 71 d8 8b cf d8 95 07 2a d3 .Z..+A.q......*. 0040 05 51 1a 80 c9 92 05 16 e1 b5 92 5b 18 b4 fa 40 .Q.........[...@ 0050 4b 7c 97 52 88 3c 01 21 d7 03 4a 96 9e de 34 eb K|.R.<.!..J...4. 0060 f7 5c 32 4b 3e 00 30 9a bb 4b e4 77 96 8a 76 c2 .\2K>.0..K.w..v. 0070 37 23 3a 76 5b c9 c4 ea 4f 97 5a cb c1 c6 ba aa 7#:v[...O.Z..... 0080 f0 52 .R Frame 20 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:05.312195000 Time delta from previous packet: 0.001174000 seconds Time since reference or first frame: 1.990991000 seconds Frame Number: 20 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0x4f93eba5 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa03c (41020) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x9b54 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x656b7479 Sequence: 3 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 70 a0 3c 00 00 40 32 9b 54 a5 e3 f9 89 a5 e3 .p.<..@2.T...... 0020 f9 7a 65 6b 74 79 00 00 00 03 af 64 1d 6b 91 84 .zekty.....d.k.. 0030 c5 2f 63 08 36 6e ff 59 3a 3d 0d 94 1a 00 a3 ee ./c.6n.Y:=...... 0040 32 75 62 20 64 d8 90 a1 91 95 21 15 26 38 1e 20 2ub d.....!.&8. 0050 51 ed 93 6c 5b 31 b4 4e f9 6a c8 32 b8 b3 2d 82 Q..l[1.N.j.2..-. 0060 14 91 3f 1e e8 24 6e 4f d8 5d 02 8b 8e b4 be b1 ..?..$nO.]...... 0070 4a 22 e6 82 2c a5 19 1d df f5 c6 0c 2f 6a 4f 93 J"..,......./jO. 0080 eb a5 .. Frame 21 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:06.315214000 Time delta from previous packet: 1.003019000 seconds Time since reference or first frame: 2.994010000 seconds Frame Number: 21 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:0c:29:fc:0c:9f, Dst: 00:50:fc:84:d2:ec Destination: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Source: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Type: IP (0x0800) Frame check sequence: 0xe6a5b545 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013f (319) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 255 Protocol: ESP (0x32) Header checksum: 0x7b51 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 4 Data (84 bytes) 0000 00 50 fc 84 d2 ec 00 0c 29 fc 0c 9f 08 00 45 00 .P......).....E. 0010 00 70 01 3f 00 00 ff 32 7b 51 a5 e3 f9 7a a5 e3 .p.?...2{Q...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 04 e4 77 96 8a 76 c2 ..k..J.....w..v. 0030 37 23 11 41 52 43 b8 e2 43 03 9f c5 dd 92 b3 28 7#.ARC..C......( 0040 14 d8 9e 34 94 c9 99 1b 63 93 3f 30 55 80 9e 4b ...4....c.?0U..K 0050 b9 bd 99 47 8f 9e 5c cf 68 2b 4e e8 f7 92 6e 60 ...G..\.h+N...n` 0060 5c fa 5b 5b 71 42 61 70 10 83 c8 25 c4 76 13 73 \.[[qBap...%.v.s 0070 df 5e 42 b4 2f 9e 75 10 7e c7 d7 92 1a 03 e6 a5 .^B./.u.~....... 0080 b5 45 .E Frame 22 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:06.315395000 Time delta from previous packet: 0.000181000 seconds Time since reference or first frame: 2.994191000 seconds Frame Number: 22 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:50:fc:84:d2:ec, Dst: 00:e0:13:00:2c:4a Destination: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Source: 00:50:fc:84:d2:ec (00:50:fc:84:d2:ec) Type: IP (0x0800) Frame check sequence: 0x42ef04c2 (correct) Internet Protocol, Src Addr: 165.227.249.122 (165.227.249.122), Dst Addr: 165.227.249.137 (165.227.249.137) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0x013f (319) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 254 Protocol: ESP (0x32) Header checksum: 0x7c51 (correct) Source: 165.227.249.122 (165.227.249.122) Destination: 165.227.249.137 (165.227.249.137) Encapsulating Security Payload SPI: 0x6b1ec64a Sequence: 4 Data (84 bytes) 0000 00 e0 13 00 2c 4a 00 50 fc 84 d2 ec 08 00 45 00 ....,J.P......E. 0010 00 70 01 3f 00 00 fe 32 7c 51 a5 e3 f9 7a a5 e3 .p.?...2|Q...z.. 0020 f9 89 6b 1e c6 4a 00 00 00 04 e4 77 96 8a 76 c2 ..k..J.....w..v. 0030 37 23 11 41 52 43 b8 e2 43 03 9f c5 dd 92 b3 28 7#.ARC..C......( 0040 14 d8 9e 34 94 c9 99 1b 63 93 3f 30 55 80 9e 4b ...4....c.?0U..K 0050 b9 bd 99 47 8f 9e 5c cf 68 2b 4e e8 f7 92 6e 60 ...G..\.h+N...n` 0060 5c fa 5b 5b 71 42 61 70 10 83 c8 25 c4 76 13 73 \.[[qBap...%.v.s 0070 df 5e 42 b4 2f 9e 75 10 7e c7 d7 92 1a 03 42 ef .^B./.u.~.....B. 0080 04 c2 .. Frame 23 (130 bytes on wire, 130 bytes captured) Arrival Time: Mar 26, 2004 10:09:06.316554000 Time delta from previous packet: 0.001159000 seconds Time since reference or first frame: 2.995350000 seconds Frame Number: 23 Packet Length: 130 bytes Capture Length: 130 bytes Ethernet II, Src: 00:e0:13:00:2c:4a, Dst: 00:0c:29:fc:0c:9f Destination: 00:0c:29:fc:0c:9f (00:0c:29:fc:0c:9f) Source: 00:e0:13:00:2c:4a (00:e0:13:00:2c:4a) Type: IP (0x0800) Frame check sequence: 0xa55a1873 (correct) Internet Protocol, Src Addr: 165.227.249.137 (165.227.249.137), Dst Addr: 165.227.249.122 (165.227.249.122) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 112 Identification: 0xa03d (41021) Flags: 0x00 .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 64 Protocol: ESP (0x32) Header checksum: 0x9b53 (correct) Source: 165.227.249.137 (165.227.249.137) Destination: 165.227.249.122 (165.227.249.122) Encapsulating Security Payload SPI: 0x656b7479 Sequence: 4 Data (84 bytes) 0000 00 0c 29 fc 0c 9f 00 e0 13 00 2c 4a 08 00 45 00 ..).......,J..E. 0010 00 70 a0 3d 00 00 40 32 9b 53 a5 e3 f9 89 a5 e3 .p.=..@2.S...... 0020 f9 7a 65 6b 74 79 00 00 00 04 02 8b 8e b4 be b1 .zekty.......... 0030 4a 22 49 8c e8 f0 14 72 13 19 06 e0 3b f0 a9 c5 J"I....r....;... 0040 a4 f5 3e 2b 62 d7 7b de e1 b5 a7 1c 44 5b 1c f8 ..>+b.{.....D[.. 0050 f2 70 a4 ba 14 36 97 dc 4d a3 cb fe 22 ab 78 98 .p...6..M...".x. 0060 19 15 83 ac 72 6f e7 02 30 3d ca c9 0f a5 05 ea ....ro..0=...... 0070 c4 7f 1e 9b f6 14 ec d3 90 18 01 34 08 d7 a5 5a ...........4...Z 0080 18 73 .s